Fix off-by-one (truncation) in k{v,}asprintf().

ok jsg@

1 files changed, 4 insertions, 4 deletions

diff --git a/sys/dev/pci/drm/include/linux/kernel.h b/sys/dev/pci/drm/include/linux/kernel.h
index d0b274c88c8..99fa7b4bb8b 100644
--- a/sys/dev/pci/drm/include/linux/kernel.h
+++ b/sys/dev/pci/drm/include/linux/kernel.h
@@ -87,10 +87,10 @@ kasprintf(int flags, const char *fmt, ...)
 	len = vsnprintf(NULL, 0, fmt, ap);
 	va_end(ap);
 
-	buf = malloc(len, M_DRM, flags);
+	buf = malloc(len + 1, M_DRM, flags);
 	if (buf) {
 		va_start(ap, fmt);
-		vsnprintf(buf, len, fmt, ap);
+		vsnprintf(buf, len + 1, fmt, ap);
 		va_end(ap);
 	}
 
@@ -105,9 +105,9 @@ kvasprintf(int flags, const char *fmt, va_list ap)
 
 	len = vsnprintf(NULL, 0, fmt, ap);
 
-	buf = malloc(len, M_DRM, flags);
+	buf = malloc(len + 1, M_DRM, flags);
 	if (buf) {
-		vsnprintf(buf, len, fmt, ap);
+		vsnprintf(buf, len + 1, fmt, ap);
 	}
 
 	return buf;